APPARATUS FOR RETRIEVING DOCUMENT DATA 



BACKGROUND OF THE INVENTION 

Field of the Inventiion 

The present invention relates to an information 
processing system, a network system, an information managing 
method, and a record medium in which information processing 
steps are stored to be readable by a computer, which are 
applicable to, for example, digital copying machines and 
other apparatus capable of expansively accepting functions 
of facsimiles, printers, and electronic files, OCRs, 
networks , and others . 
Description of the Related Art 

In recent years, for example, a functional expansion 
based upon the integration of the functions of a facsimile, 
a printer, an electronic file, an OCR or the like has been 
in progress. Additionally, such a digital copying machine 
agrees with a network system involving connections of a 
plurality of computers, and also has developed toward an 
apparatus a plurality of users can operate through their 
personal computers (which will hereinafter be referred to 
simply as PCs) and a network connected thereto. 
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Meanwhile^ unlike conventional document management, in 
which documents are kept in binders or the like, electronic 
files (electronic filing systems) have contributed to the 
saving of space by virtue of the documents being written in 
5 a memory, such as a magneto-optical disk or the like (herein 
after "MO" ) . 

^ In such electronic files, retrieval of a document the 

^ user wants depends upon the designation of a document name 

or a document number and, for example, in the case of the 
J=i! 10 MEDIO digital cabinet produced by Canon Inc., a retrieval 
^ sheet is printed out when a document is recorded, and is 

M read in when the same document is outputted the next time; 

m in this way the document the user wants is fetched 

selectively from a plurality of documents recorded on one 
15 recording medium such as an MO. This permits users to 
retrieve the desired document easily. 

In addition, because a changer drive, which can manage 
a plurality of recording mediums such as MOs, has come into 
widespread use, a file system capable of managing a large 
2 0 volume of information has showed up. Also, as information 
retrieving methods for use in a filing system, there have 
been known various methods, including the techniques of: 
users making the retrieval directly through an operating 
section; retrieving information in accordance with a 
2 5 retrieval request sheet from a facsimile; and retrieving 



information through the use of a PC on a network. 

However, in the aforesaid filing system or the like 
enabling the management of a large volume of information and 
allowing the various retrieving methods, difficulty has been 
5 encountered in preserving the confidential of the 
information as desired. 

Concretely, in general, before the operation by which 
the users retrieve information, the input of a password is 
necessary. Additionally, in an information processing 

10 system such as a digital copying machine having a plurality 
of functions such as facsimile, printer, electronic file, 
OCR and others, selection as to whether a password is 
required ("setting", "no setting"), is made function by 
function. That is, passwords can also be set for some 

15 functions, which then are usable subject to the input of 
the correct password, while passwords need not be required 
for other functions. In the case of a function (or 
apparatus) requiring the input of a password, users can use 
it freely if once they learn the password. This signifies 

20 that any users who were at the operating position at one 
point in time, can still use the function (apparatus) as 
long as they remember the password, even if for example they 
have since lost their operating qualification (right to use 
that function or apparatus) due to change of work, transfer, 

25 retirement or the like. Accordingly, particularly, in a 
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system for managing documents in which secret documents may 
be handled^ there is a possibility that disqualified users 
(users who have lost their operating qualification but who 
remember the password) can access the secret documents. 

5 

SUMMARY OF THE INVENTION 

Accordingly, the present invention has been developed 
with a view to eliminating these drawbacks, and it is an 
object of the invention to provide an information 

10 input /output unit, a network system, an information managing 
method and a record medium storing information processing 
steps to be readable by a computer, which are capable of 
reliably preventing improper or illegal outward flow or 
leakage of (or other improper access to) information. 

15 Another object of this invention is to maintain the 

confidentiality of secret information, even in case in which 
the users who had gained the right of access to secret 
documents, have since lost their access right thereto. 

A further object of this invention is to, even in a 

20 case in which a password for access to document data in a 

document file has somehow leaked out to unauthorized person, 
prevent subsequent improper use of the password. 

A further object of this invention is to provide a 
retrieval requesting method according to various modes to 

25 the users in the retrieval of document data in a document 
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file. 

A still further object of this invention is to return a 
retrieval result in an appropriate way to the user who has 
retrieved document data in a document file. 

Yet a further object of this invention is to notify a 
user who has retrieved document data in a document file^ of 
a new password in a way suitable for the mode the user used 
for a retrieval request. 

For these purposes, according to an embodiment of this 
invention, there is provided an information processing 
system which, after receiving a valid password required for 
access to a predetermined information processing function 
and performing that function, then issues a new password, 
and uses the new password as a valid password instead of the 
old one for performing the next information processing 
function. 

Other objects and features of the present invention 
will become more readily apparent from the following 
description of the preferred embodiments taken in 
conjunction with the accompanying drawings. 

RPTKF DESrPtTPTTON OF THE DRAWINGS 

Fig. 1 is a block diagram showing a configuration of a 
filing system according to the present invention; 

Fig. 2 is a block diagram showing a configuration of an 
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image input /output control section belonging to a digital 
copying machine in the filing system; 

Fig. 3 is a cross-sectional view showing the digital 
copying machine; 
5 Fig. 4 is a block diagram showing an internal 

configuration of a reader section of the digital copying 
machine; 

Fig. 5 is a block diagram showing an internal 
^ configuration of a printer section of the digital copying 

10 machine; 

= Fig. 6 is an illustration useful for describing the 

nJ performance of a filing function in an operating section of 

the digital copying machine; 
5 Fig. 7 is an illustration useful for describing the 

15 input of conditions (restrictions) on information retrieval 
by the filing function; 

Fig. 8 is an illustration useful for describing an 
operation for selecting desired information from information 
retrieved on the basis of the condition input; 
20 Fig. 9 is an illustration useful for describing a 

retrieval sheet in another information retrieving method 
using the retrieval sheet; 

Fig. 10 is an illustration useful for describing a 
state in which a request for the information retrieval is 
25 communicated to a terminal unit which manages information 
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retrieval requests; 

Fig. 11 is an illustration useful for describing an 
operation to be conducted when an information manager on the 
terminal unit side inputs a password; 
5 Fig. 12 is an illustration useful for describing a 

state in which the contents of the information retrieval 
request are displayed in response to the input of the 
password; 

Fig. 13 is an illustration useful for describing 
10 information to be given to the digital copying machine in a 

case in which the information manager rejects the 

information retrieval request; 

Fig. 14 is an illustration useful for describing a 

facsimile transmitted writing to be used when the 
15 information manager accepts an information retrieval^ in a 

further information retrieving method in which a request for 

information retrieval is made through facsimile 

transmission; 

Fig. 15 is an illustration useful for describing a 
20 facsimile transmitted writing to be used when the 

information manager does not accept an information retrieval, 

in a further information retrieving method in which a 

request for information retrieval is made through facsimile 

transmission; 

25 Fig. 16 is an illustration available for explaining an 
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operation to be conducted when the digital copying machine 
confirms information about the information retrieval or the 
like; 

Fig. 17 is an illustration available for explaining the 
recorded contents on a document retrieval which is one 
example of the contents to be confirmed; 

Fig. 18 is an illustration available for explaining the 
recorded contents on scan, print, scan jam and print jam 
which are one example of the confirmation contents; 

Fig. 19 is an illustration available for explaining the 
recorded contents on the number of times of scan at every 
month as one example of the confirmation contents; 

Fig. 2 0 is an illustration available for explaining the 
recorded contents on the number of times of scan at every 
month as one example of the confirmation contents; 

Fig. 21 is an illustration available for explaining the 
recorded contents on the number of times of scan at every 
size as one example of the confirmation contents; 

Fig. 22 is an illustration available for explaining the 
recorded contents on the number of times of scan jam at 
every month as one example of the confirmation contents; 

Fig. 23 is an illustration available for explaining an 
operation for setting a mode to issue a new password in the 
digital copying machine after the information retrieval; 

Fig. 24 is an illustration available for explaining a 
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state in which the new password is handed over to a terminal 
unit which manages the information retrieval request; 

Fig. 25 is a flow chart useful for explaining the 
processing for information retrieval by means of an 
5 information retrieval request from the operating section, 
including a mode for issuing a new password; 

Fig. 26 is a flow chart (steps S701 to S708) useful for 
explaining the processing for information retrieval by means 
of an information retrieval request from the retrieval sheet, 

10 including a mode for issuing a new password; 

Fig. 27 is a flow chart (steps S605 to S612) useful for 
explaining the processing for information retrieval by means 
of an information retrieval request from the retrieval sheet, 
including a mode for issuing a new password; 

15 Fig. 28 is a flow chart (steps S801 to S814, S826) 

useful for explaining the processing for information 
retrieval by means of an information retrieval request made 
through a facsimile transmission, including a mode for 
issuing a new password; and 

20 Fig. 29 is a flow chart (steps S801 to S814, S826) 

useful for explaining the processing for information 
retrieval by means of an information retrieval request made 
through a facsimile transmission, including a mode for 
issuing a new password. 



25 
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DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The present invention is applied to^ for example, a 
filing system 100 shown in Fig. 1. 

As illustrated, the filing system 100 is made up of a 
5 digital copying machine 110 including a reader section and a 
printer section, which will be described below, user side 

J7^ personal computers (PCs) 170(a), 170(b), 170(c), capable 

of using the digital copying machine 110 through a network 
^. 180, and a terminal unit 160 for managing information 

^ 10 retrieval requests from these PCs 170(a), 170(b), 
" 170(c), which are connected to the network 180. 

ru In addition, the digital copying machine 110 is 

ifl equipped with an image input /output control section 12 0 and 

is connected through this image input/output control section 
15 120 to the network 180. 

The image input/output control section 120 includes a 
facsimile (FAX) section 121, an OCR section 122, a file 
(FILE) section 123, a core (CORE) section 124, a formatter 
section 125 and a network (NetWork) I/F section 126, and is 
20 further provided with an MO drive 131 for controlling an MO 
disk made to preserve image data of the file section 122. 
The MO drive 131 has a changer function to control a 
plurality of MO disks. Additionally, a G3FAX 140 is 
connected to the FAX section 121. Owing to this image 
25 input/output control section 120, the digital copying 
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machine 110 combines its own function and a plurality of 
other functions such as facsimile and OCR, thus 
accomplishing functional extension . 

Fig. 2 shows a configuration of the image input /output 
5 control section 120 more concretely. 

That is, as Fig. 2 shows, in addition to the aforesaid 
components, the image input/output control section 120 
includes a hard disk 132 connected to the FAX section 121, a 
computer interface (I/F) section 127 and an image memory 

10 section 128. 

The FAX section 121, the file section 123, the computer 
I/F section 127, the formatter section 125, the image memory 
section 128, the OCR section 122 and the network I/F section 
126 are each connected to the core section 124. 

15 The FAX section 121 is in connection with a public 

network circuit (telephone circuit) to make FAX 
communications with the G3FAX 140 in Fig. 1, and other 
facsimile machines (not shown). Concretely, for example, 
the FAX section 121 expands compressed image data received 

20 through the telephone circuit and transfers the image data 
to the core section 124. At this time, when needed, the 
received compressed image data is retainable temporarily in 
the hard disk 132. Additionally, the FAX section 121 
compresses image data transferred from the core section 124 

25 and transmits the image data through the telephone circuit 
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to the other party. 

The file section 123 compresses the image data 
transferred from the core section 124 and puts the image 
data into a magneto-optical disk^ set in an MO drive (in 
5 this case, a magneto-optical disk drive unit) 131, as a 

document file, together with a keyword for use in retrieval 
of this compressed image data. 

In addition, the file section 123 retrieves the 
corresponding document file (compressed image data) from the 
10 magneto-optical disk set in the MO drive 131, on the basis 
of a keyword transferred through the core section 124, and 
reads out and expands the retrieved data before sending it 
to the core section 124. 

The computer I/F section 127 acts as an interface lying 
15 between a personal computer or workstation (PC/WS) 135 and 
the core section 124. The PC/WS 135 corresponds to the PCs 

170(a), 170(b), 170(c), or the terminal unit 160 in Fig. 

1. 

The formatter section 125 is for translating code data 
20 indicative of an image transmitted from the PC/WS 135 into 
image data recordable by the printer section 134, while the 
image memory section 128 is for temporarily storing data 
transferred from the PC/WS 135. 

The core section 124 is for controlling the flow of 
25 data among the reader section 133, the FAX section 121, the 
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file section 123, the computer I/F section 127, the 
formatter section 125 and the image memory section 128, 

Thus, the foregoing image input/output control section 
120 is connected through the core section 124 to a reader 
5 section 111 of the digital copying machine 110. 

The reader section 111 is connected to the printer 
section 112 to read an image of an original set an the 
=^ reader and supplies the read data to the printer section 112 

W or the image input/output control section 120. The printer 

Wj 10 section 112 records (prints out) an image corresponding to 

in 

^ image data from the reader section 111 or from the image 

ry input /output control section 120 on record paper. 

^ Fig. 3 is an illustration (cross-section) of mechanical 

=o 

constructions of the reader section 111 and the printer 
15 section 112. In the reader section 111, an original feeding 
section 201 feeds the set originals one by one in order (for 
example, from the final page to the first page) onto a glass 
platen 202 and ejects the original from the platen 202 after 
the completion of the original reading. When the original 
20 is conveyed onto the glass platen 202, a lamp 203 goes on 

and a scanner unit 204 starts to move, thereby scanning and 
exposing the original. At this time, light reflected from 
the original is reflected by mirrors 205, 206 and 207 and 
passed through a lens 208 to a "CCD" image sensor (which 
25 will hereinafter be referred to simply as a CCD) 209. In 
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this way^ the CCD 209 reads out the image of the original. 
Image data outputted from the CCD 209, after undergoing 
predetermined image processing, is transferred to the 
printer section 112 or the core section 124 of the image 
5 input/output control section 120. 

In the printer section 112, a laser light emitting 
C section 221 is driven by a laser drive to emit laser light 

^ in accordance with image data outputted from the reader 

y section 111. This laser light reaches a photosensitive drum 

W 10 (photoconductor ) 222 to form a latent image corresponding to 
= the laser light on the photosensitive drum 222. A 

rU developing unit 223 adheres a developer onto the latent 

%n image portion of the photosensitive drum 222. Subsequently, 

at a timing synchronous with the start of the laser light 
15 irradiation, record paper is fed from one of cassettes 224 
and 225 and conveyed to a transfer section 226 so that the 
developer adhering to the photosensitive drum 222 is 
transferred onto the record paper. The record paper 
carrying the developer advances to a fixing section 227, 
2 0 where the developer is fixed on the record paper under heat 
and pressure applied by the fixing section 227. After 
passing through the fixing section 227, the record paper is 
ejected by ejecting rollers 228, while a sorter 240 puts the 
ejected record paper in the appropriate bin for sorting. 
2 5 (The sorter 240 puts the record paper in the uppermost bin 
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if sorting is not set.) If double-sided recording is set, 
when the record paper reaches the ejecting rollers 228, the 
ejecting rollers 228 are rotated in the reverse direction so 
that the same record paper is led to a paper re-feeding path 
5 by a flipper 229. If multiple recording is set, the record 
paper is led to the paper re-feeding path by the flipper 229 
so as not to be conveyed up to the ejecting rollers 228. 
^ The record paper led to the paper re-feeding path is placed 

U in the transfer section 226 at the above-mentioned timing. 

u = 

Ln 10 Fig. 4 is an functional illustration of the reader 

section 111. As illustrated, the reader section 111 
y includes an A/D • SH (shading) processing section 301 to which 

Q image data is supplied from the CCD 209, an image processing 

section 3 02 for conducting predetermined image processing on 
15 the output of the A/D-SH processing section 301, an 

interface (I/F) section 303 for the core section 124, an 
operating section 305 by means of which the user can enter 
instruct ions /commands, etc., a CPU 304 for wholly 
controlling the operation of the reader section 111 in 
20 accordance with the user's operation of the operating 
section 305, and a memory 306 for storing processing 
programs, various types of data and others for implementing 
the operational control in the CPU 304. 

Image data outputted from the CCD 209 is 
25 analog/digital-converted and shading-corrected in the A/D • SH 



processing section 301. The image data processed in the 
A/D-SH processing section 3 01 is transferred through the 
image processing section 302 to the printer section 112 and 
further transferred through the I/F section 3 03 to the core 
section 124 of the image input/output control section 120. 

The CPU 304 controls the image processing section 302 
and the I/F section 3 03 in accordance with the contents the 
user has set in the operating section 305. For example^ if 
the copying mode for trimming processing is set in the 
operating section 305, the CPU 304 makes the image 
processing section 302 conduct the trimming processing and 
then send the processed image data to the printer section 
112. Additionally, if a facsimile transmission mode is set 
in the operating section 305, the CPU 304 sends, through the 
I/F section 3 03, image data and a control command 
corresponding to a fax mode set in the operating section 3 05 
to the core section 124. 

This control program for the CPU 304 is retained in the 
memory 306, and the CPU 304 implements the control for the 
aforesaid operations while referring to the memory 3 06. 
Additionally, the memory 306 is also used as a working area 
for the CPU 304. 

Fig. 5 is a functional illustration of the printer 
section 112. In this illustration, the printer section 112 
includes an interface (I/F) section 311 connected to a FAX 
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section 121, a file section 123, a computer I/F section 127, 
a formatter section 125, an image memory section 128, an OCR 
section 122 and a network I/F section 126 in the image 
input /output control section 120, an interface (I/F) section 
5 313, connected to the reader section 111, a data processing 
section 312 for conducting predetermined image processing on 
image data supplied through the I/F section 311 or the I/F 
section 313, a CPU 314 for wholly implementing the 
operational control of the printer section 112 in accordance 
h 10 with a control command or the like supplied thereto from the 
reader section 111 through the I/F section 313, and a memory 
315 for storing processing programs, various kinds of data 
or the like needed for when the CPU 314 performs the 
operational control. 
15 The image data from the aforesaid reader section 111 is 

sent through the I/F section 313 to the data processing 
section 312, while the control command from the reader 
section 111 (a control command corresponding to a mode or 
the like set in the operating section 305 of the reader 
20 section 111) is sent through the I/F section 313 to the CPU 
314. 

The data processing section 312 is for conducting image 
processing, such as image rotating or variable magnification, 
on the image data from the reader section 111 under the 
25 control of the CPU 314 and sends the image-processed data 



through the I/F section 311 to the FAX section 121, the file 
section 123 and the computer I/F section 127 • 

Code data representative of an image supplied from the 
computer I/F section 127 through the I/F section 311 is 
transferred to the data processing section 312 and then 
transferred through the formatter section 124 to be evolved 
into image data. This image data is sent through the I/F 
section 311 to the data processing section 312 and 
subsequently given through the I/F section 311 to the FAX 
section 121 or other sections. 

Furthermore, the image data supplied from the FAX 
section 121 through the I/F section 311 is handed over to 
the data processing section 312 and then transferred through 
the I/F section 311 to the file section 123, the computer 
I/F section 127 or other elements. 

Still furthermore, the image data supplied from the 
file section 123 through the I/F section 311 is communicated 
to the data processing section 312 and then transferred 
through the I/F section 311 to the FAX section, the computer 
I/F section 127 or other elements - 

The CPU 314 performs the control for the above- 
mentioned operations according to the control program stored 
in the memory 315 and the control command(s) transferred 
thereto from the reader section 111 through the I/F section 
133. The memory 315 is used additionally as a working area 
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for the CPU 314. 

With the aforesaid configuration of the image 
input/output control section 120, the digital copying 
machine 110 can use the core section 124 of the image 
5 input/output control section 120 principally to compositely 
perform the processing based upon the functions such as the 
reading of an image from an original, the printing-out of 



preservation of the image and the input /output of data from 



Secondly, the outline of the following information 
retrieving methods 1 to 4 will be described hereinbelow as 
examples of retrieving a document the user wants through the 
digital copying machine 110. 
15 [Information Retrieving Method 1 Involving an Operation on 
the Operating Section 305 of the Digital Copying Machine 
100] 

First of all, the user inputs password information, 
using for example a password input screen (not shown) in the 

20 operating section 305. Subsequently, in Fig. 6, the user 

selects "FILE", which puts the function (filing function) of 
the file section 123 in operation, from among a number of 
functional icons, including the icons "?", "COPY", "FAX", 
"FILE" and "T", on a screen (picture) 501 in the operating 

25 section 305. As a result of this selection, a screen 502 



the image, the transmission/receive of the image, the 
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the computer. 



appears in the operating section 3 05 as shown in the same 
illustration. Following this, the user selects "EXPERT 
FUNCTION" on this screen 502, and a screen 503 for selection 
of a retrieving method appears in the operating section 305 
as shown in the same illustration • Then, the user selects 
"RETRIEVAL UNDER CONDITION" on the screen 503, and a screen 
504 for input of various kinds of conditions for retrieval 
of a desired document appears in the operating section 3 05, 
as shown in Fig. 7. The user inputs one or more 
condition(s) on the screen 504. 

The information (keyword) input in this way, such as 
the password information and the various conditions for the 
information retrieval, is sent as an information retrieval 
request to the terminal unit 160 (a unit for managing 
information retrieval requests). Furthermore, as will be 
described in detail below, when the terminal unit 160 
confirms the information retrieval request, the file section 
123 implements document retrieval according to the aforesaid 
keyword- Accordingly, a document obtained as a retrieval 
result is displayed on a screen in the operating section 305 
or is printed out from the printer section 112. 

In addition, the terminal unit 160 issues a new 
password. In this case, a noticeable point is that the 
certification or check of the password and the issuance of 
the new password are centralized in management in the 



terminal unit 160, thereby preventing unnecessary dispersion 
of the password information. 

In this instance, among the conditions the user can 
input on the screen 504 in Fig. 7, there are an MO disk name 
in the MO drive 130, a document name, a document number 
given to the document and the date of the update of the 
document. If an MO disk name is inputted as a condition, 
the file section 123 retrieves the documents in the disk 
corresponding to the inputted disk name through the MO drive 
13 0 with a changer function which can control a plurality of 
MO disks (each of which will hereinafter be referred to 
simply as a disk) . If a document name is inputted as a 
condition, it retrieves the document (s) corresponding to the 
inputted document name. If a document number is inputted as 
a condition, it retrieves the document (s) corresponding to 
the inputted document number. Furthermore, if an update 
date is inputted as a condition (requiring, e.g., that only 
documents updated after that date for only ones updated 
before it, or between two dates are eligible for retrieval 
in response to that request), it retrieves the documents in 
the disk accessed within the terms thereof. 

Therefore, for example, if a disk name "0001" is 
inputted as a condition, a retrieval result appears on a 
screen 505 as shown in Fig. 8. When a desired document is 
selected on this screen 505 and the "PRINT" at a lower 
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portion of the screen 505 is pressed, this document is 
printed out in the printer section 112. 

[Information Retrieving Method 2 Using a Retrieval Sheet in 
the Digital Copying Machine 100] 
5 . In this case, a retrieval sheet 190 shown in Fig. 9 is 

put to use. This retrieval sheet 190 is made to be printed 
out at the registration of a document. In the retrieval 
sheet 190, information including a date, a document name and 
a disk name is printed in a document information section 512, 

10 while the aforesaid document information is marked in a 
marksheet section 521. 

Accordingly, when retrieving a desired document through 
the use of the aforesaid retrieval sheet 190, the user marks 
password information in a retrieval password section 522 on 

15 the retrieval sheet 190 (i.e., marks the corresponding 
numbers of "1" to "0"), and marks, in an output setting 
section 511, to instruct whether or not the document 
indicated as a retrieval result is to be printed out (marks 
"YES" or "NO"). 

20 After the completion of the marking of various kinds of 

information on the retrieval sheet 190, the user makes the 
digital copy machine 110 fulfill the file function (file 
function mode) in the above-described way and makes it read 
the retrieval sheet 190. Accordingly, when recognizing, on 

25 the basis of sheet decision sections 515 to 520 on the 
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retrieval sheet 190^ that the inputted sheet is a retrieval 
sheet 190 and upon confirming that the right password 
information is set in the retrieval password section 522 on 
the retrieval sheet 190, the file section 123 transmits 
these contents as an information retrieval request to the 
terminal unit 160. Furthermore, as will be described in 
detail below, when the terminal unit 160 accepts the 
information retrieval request, the file section 123 uses the 
contents of the retrieval sheet 190 as a keyword and 
conducts a document retrieval on the basis of this keyword; 
therefore, the resultant document is displayed on a screen 
in the operating section 305 or is printed out from the 
printer section 112. 

On the other hand, if confirming that the input sheet 
is not a retrieval sheet 190, the file section 123 makes a 
decision that the inputted sheet is a document (an original 
or the like) whose contents are to be retained in a disk, 
and writes that document in a predetermined disk through the 
use of the MO drive 130. This predetermined disk signifies, 
when the user designates a disk in which the document is 
written (the designation is made by, for example, an 
operation in the operating section 305), the designated disk, 
whereas signifying, when no designation is made by the user, 
a predetermined preferential disk. After the completion of 
the document writing operation, the file section 12 3 gives 



"document name" to that document for the registration. 
Incidentally, "disk name", "disk number" and "date" are 
written and registered in advance. The information at this 
time is printed out as the retrieval sheet 190 from the 
printer section 112 to be used at the next document 
retrieval . 

[Information Retrieving Method 3 Using a Retrieval Sheet in 
the Digital Copying Machine 100] 

In this method, for the retrieval of a desired document, 
the retrieval sheet 190 (described above) is sent from the 
G3FAX 140 through facsimile transmission to the digital 
copying machine 110. Accordingly, before this is done, the 
user writes password information in the retrieval password 
section 522 in the retrieval sheet 190 and marks that he or 
she would like by FAX return (reply), the document obtained 
as a retrieval result, in the output setting section 511 
(i.e., the user marks "FAX"), and further writes the fax 
number to which the reply FAX transmission should be sent, 
in a FAX return setting section 513. In addition, if needed, 
a desired FAX return time is written in a FAX reply (return) 
time setting section 514. Thus, the desired time for the 
receipt by the user of the document obtained as a retrieval 
result, can be specified from the retrieval requesting side. 

When the above-mentioned contents of the retrieval 
sheet 190 are transmitted from the G3FAX 140 through a 
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public circuit (or via any communications medium) to the 
digital copying machine 110, the FAX section 121 receives 
them. When a decision or determination is made, on the 
basis of the sheet decision sections 515 to 520 on the 
5 received sheet, that the received sheet is the retrieval 

sheet 190 and when a decision or determination is made that 
right password information is set in the password section 
522 on the retrieval sheet 190, the FAX section 121 
transfers the information on that retrieval sheet 190 to the 

10 file section 123. The file section 123 transmits the 
information from the FAX section 121 as an information 
retrieval request to the terminal unit 160. Furthermore, as 
will be described in detail below, if the terminal unit 160 
accepts that information retrieval request, the file section 

15 123 uses the information on the retrieval sheet 190 as a 
keyword, conducting a document retrieval according to the 
keyword. Accordingly, the resultant document is transmitted 
through the FAX section 121 to the facsimile receiver 
identified as the reply-receiving FAX in the FAX return 

20 setting section 513. Additionally, if needed, this 

transmission is made at the time written in the FAX reply 
time setting section 514. 

On the other hand, if a decision is made that the 
received sheet is not a retrieval sheet 190, the FAX section 

2 5 121 makes a decision that the received sheet has been 



received by ordinary FAX reception^ and, in this case, hands 
over the received sheet information to the printer section 
112 of the digital copying machine 110 for printing out. 

Incidentally, although the OCR section 122 of the image 
input/output control section 120 can also read the FAX reply 
information written in the retrieval sheet 19 0 and identify 
it, if the OCR section 122 is not present, the reply or 
return is addressed to the number of the FAX transmitting 
the retrieval sheet 190 (in this case, the FAX number of the 
G3FAX 140). Additionally, in this case, after the 
completion of the retrieval in the file section 123, the 
reply transmission of the document which is the retrieval 
result/ is made immediately. 

Furthermore, in a case in which the file section 123 
does not exist, even if the received sheet is a retrieval 
sheet 190, it is outputted from the digital copying machine 
110 the same as an ordinary FAX reception. 

[Method 4, for when a PC Makes the Digital Copying Machine 
100 Conduct Information Retrieval] 

For example, in a case in which the PC 170(a) performs 
an information retrieval, the user of the PC 170(a) inputs 
password information to his own PC 170(a). Also, in this 
case, as well as the information retrieving method 1 
described above, the user inputs various conditions for the 
retrieval of a desired document on the screen 504 shown in 
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Fig. 7. 



The password information and the information (keyword) 
such as the various conditions for the retrieval of the 
document the user wants, are sent through the network 180 to 
5 the file section 123. The file section 123 transmits these 
sets of information as an information retrieval request to 
p the terminal unit 160 (a unit which manages information 

^ retrieval requests). Furthermore, as will be described in 

iJ detail below, when the terminal unit 160 accepts the 

Ji 10 information retrieval request, the file section 123 



implements a document retrieval according to the keyword. 
The resultant retrieved document is sent through the network 
180 to the PC 170(a) . 

The above description relates to the outline of the 



15 information retrieval request methods 1 to 4 . As described 
above, all the information retrieval requests (various 
conditions or the like inputted for the retrieval of a 
desired document) from the users input according to these 
methods are once collected in the terminal unit 160, and the 

20 information manager confirms these retrieval requests and 
approves or rejects each of these retrieval requests, 
thereby accomplishing the integrated management of 
information. This integrated management will be described 
hereinbelow in detail. 

25 When a retrieval request (information retrieval request 
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according to the information retrieving method 1 ) input via 
the operating section 305 of the digital copying machine 110 
or an information retrieval request (information retrieval 
request according to the information retrieving method 2 ) 
5 made by means of the input of a retrieval sheet 190 is given 
to the terminal unit 160^ a screen 531 appears on a display 
3 of the terminal unit 160^ as shown in Fig, 10. At this time, 

E a password input screen 532 appears on the display of the 

=] terminal unit 160, as shown in Fig. 11. The information 

10 manager inputs a password on this screen 532. If the 
^ inputted password is correct, the contents of the retrieval 

Z request appears on a screen 533 as shown in Fig. 12. The 

information manager confirms the contents on the screen 53 3 
and chooses "YES" (approval: permission for retrieval) or 
15 "NO" (rejection: no permission for retrieval). 

If the selection on the screen 533 is "YES" (acceptance 
of request), information indicative of the selection of 
"YES" and information on the contents of the retrieval 
request are transferred to the file section 123 of the 
2 0 digital copying machine 110, where the above-described 

document retrieval is conducted. Accordingly, the printer 
section 112 of the digital copying machine 110 prints out a 
document corresponding to the retrieval request . 

On the other hand, if the selection on the screen 533 
25 is "NO" (non-acceptance of request), message information 
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representative of the selection of "NO" is transmitted to 
the digital copying machine 110, and a rejection message 
screen 534 appears in the operating section 305 as shown in 
Fig. 13. 

5 Furthermore, in the case of an information retrieval 

request ( information retrieval request according to the 
Q information retrieving method 3) by the FAX transmission of 

^ a retrieval sheet 190 from the G3FAX 140, by means of the 

= ?] reply by the FAX section 121 of the digital copying machine 

^ 10 110, the contents of the retrieval sheet 190 are sent to the 
^ terminal unit 160. The information manager confirms the 

J: contents of the retrieval sheet 190 sent thereto, and in the 

ry case of accepting that request, writes information such as a 

retriever ID, a retrieval document name and the number of 
15 sheets in a FAX transmission report 535 with a fixed format 

acting as a document transmission guidance, shown in Fig. 14, 
and sends that information, together with the contents of 
the retrieval sheet 190, to the digital copying machine 110 
facsimile transmission. Accordingly, in the digital copying 
20 machine 110, the FAX section 121 receives the information 
sent from the terminal unit 160 by the facsimile 
transmission, and document retrieval is conducted according 
to the contents thereof. Thereafter, the document obtained 
as a result of the retrieval, together with the FAX 
25 transmission report 53 5 in Fig. 14, is transmitted to the 



y3 
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request issuer (G3FAX 140). 

On the other hand,, in the case of non-acceptance of the 
request, the information manager sends a FAX transmission 
report 53 6 with a fixed format acting as a document 
5 transmission no-permission guidance, shown in Fig. 15, to 
the digital copying machine 110 by FAX transmission. 
Accordingly, in the digital copying machine 110, the FAX 
section 121 receives the information about the FAX 
transmission report 536 sent from the terminal unit 160 by 

10 the FAX transmission, and communicates it to the request 
issuer (G3FAX 140). 

Furthermore, in the case of an information retrieval 
request (information retrieval request according to the 
information retrieving method 4) by PC (in this case, the PC 

15 170(a)) on the network 180, as well as the information 

retrieving methods 1 and 2 described above, screen 531 shown 
in Fig. 10 appears on a display of the terminal unit 160, 
and subsequently, screen 533, displaying the contents of the 
retrieval request, shown in Fig. 12 appears. The 

2 0 information manager confirms the contents on the screen 533 
and selects "YES" or "NO". 

If "YES" (acknowledgment of the request) is selected on 
the screen 533, information indicative of the selection of 
"YES" and information about the retrieval request contents 

25 are transferred to the file section 123 of the digital 



copying machine 110, and the document retrieval takes place 
as described above; therefore, the document requested is 
transmitted to the request-issuing PC 170(a) • 

On the other hand, if "NO" (no acknowledgment of the 
request) is selected, message information to this effect is 
sent through the digital copying machine 110 to the PC 
170(a), and the rejection message screen 534 appears, as 

shown in Fig. 13. 

The approval/rejection of the information retrieval 
request from the terminal unit 160 and the retrieval record, 
including the user who is making the information retrieval 
request and the result by the information manager or the 
like who permits it, are confirmable in the digital copying 
machine 110. 

Concretely, for example, as mentioned above with 
reference to Fig. 6, the screen 501 including the functional 
icons of "?", "COPY", "FAX", "FILE" and "T" appears in the 
operating section 305 of the digital copying machine 110. 
If the user selects "FILE" on this screen 501, a screen 537 
appears as shown in Fig. 16, and if the user selects 
"MANAGEMENT" on this screen 537, a screen 538 is displayed 
as shown in the same illustration. If the user selects 
"RETRIEVAL RECORD DISPLAY" on this screen 538, a screen 539 
of a retrieval record list is displayed as shown in Fig. 17 
so that the user can confirm the retrieval record. 
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In addition, the record about the scan, the printing, 
and any scanning jam or printing jam is also confirmable in 
the digital copying machine 110 to be utilized for 
accounting or the like. 
5 As a concrete example, a screen 540 of record contents 

is shown in Fig. 18. For instance, if, on this screen 540, 
the user selects "SCAN" and touches "OK", the monthly scan 
frequency is displayed in a screen 541 as shown in Fig. 19. 
Subsequently, if, on the screen 541, the user selects "PAGE" 

10 and touches "OK", a screen showing the monthly numbers of 

pages appears, as shown in Fig. 20. Following this, if, on 
the screen 542, the user selects "SIZE" and touches "OK", a 
screen 543, showing the numbers of times of printing at 
various sizes, appears, as shown in Fig. 21. 

15 Also in the case in which the user selects "PRINT" on 

the screen 540 in Fig. 18, information similar to that in 
the case of "SCAN" is obtainable. 

Furthermore, if the user selects "SCAN JAM" and touches 
"OK" on the screen 540, a screen 544 showing the monthly 

20 numbers of times of jamming appears, as shown in Fig. 22. 
Likewise, if the user selects "PRINT JAM", information 
similar to that in the case of "SCAN JAM" is obtainable. 

Incidentally, it is also appropriate (although not 
necessary) the foregoing record display takes place within a 

25 mode ( "serviceperson mode") only service personnel can 
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access . 

The filing system 100 is designed such that, after the 
implementation of the foregoing information retrieval, the 
digital copying machine 110 itself produces a new password 
5 and sends it through the network 180 to the terminal unit 
160 having a managing function. This configuration 
constitutes the most important feature of this embodiment. 

That is, in the operating section 3 05 of the digital 
copying machine 110, as described above with reference to 
10 Fig. 16, if the user selects "FILE" on the screen 501 and 
selects "MANAGEMENT" on the next screen 537, screen 538 
appears. At this time, as shown in Fig. 23, a screen 538' 
additionally including an item "PRODUCTION OF NEW PASSWORD" 
appears. If, on this screen 538', the user selects 
15 "PRODUCTION OF NEW PASSWORD", a screen 545 appears as shown 
in the same illustration. If, on this screen 545, the user 
selects "YES", a new password is thereby produced. 

Incidentally, the setting of "MANAGEMENT" 
"PRODUCTION OF NEW PASSWORD" "YES" in the operating 
20 section 305 is made as a mode to be set on the condition of 
existence of recognition of the connection between the 
digital copy machine 110 (concretely, the image input /output 
control section 120) and the terminal unit 160. 

In such a new-password production mode, for example, 
25 the screen 531 in Fig. 10 appears on a display of the 
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terminal unit 160^ and on the screen 533 in Fig. 12, the 
information manager selects "YES" (acceptance of a request) 
or "NO" (non-acceptance of the request) so that the 
corresponding information is given to the file section 123 
5 of the digital copy machine 110. Accordingly, the file 
section 123 issues a new password with respect to the 
password for the information retrieval request (the password 
of the user who issued the present document retrieval 
request), and transmits the new password to the terminal 
10 unit 160. 

Upon receipt of this transmission, as shown in Fig. 24, 
a screen 54 6 appears to indicate the issuance of the new 
password, and the information manager notifies the qualified 
user who made the information retrieval request, of that new 
15 password by means of word of mouth or electronic mail so 
that the user can use the new password upon subsequent 
operations . 

Thus, when the qualified user makes the next 
information retrieval request through the use of the new 

20 password, this information retrieval request is transferred 
to the terminal unit 160, and when the terminal unit 160 
accepts this request, the digital copying machine 110 again 
issues a new password and sends it to the terminal unit 160. 
That is, at every information retrieval, a new password is 

25 issued by the digital copying machine 110. 



The operation of the filing system 100 on an 
information retrieval request according to the information 
retrieving methods 1 to 4^ including such a new-password 
production mode^ is shown in the flow charts of Figs. 25 to 
29. 

[In the Case of an Information Retrieval Request According 
to Information Retrieving Method 1: see Fig. 25] 

First of all, the user on the digital copying machine 
110 side inputs password information on a password input 
screen in the operating section 305 (step S601). Then, the 
user inputs various conditions for retrieval of a desired 
document according to the operational screens, shown in Figs. 
6 and 7 (step S602). Subsequently, the user selects the 
desired document on the document selecting screen 505, shown 
in Fig. 8 (step S603). 

The user's password information and the information 
(keyword) such as the various conditions for the information 
retrieval input in the digital copying machine 110 in this 
way are sent as an information retrieval request to the 
terminal unit 160 (step S604). 

The screen 532 shown in Fig. 10 appears in the terminal 
unit 160, while the information manager on the terminal unit 
160 side inputs the correct password using the screen 532 
shown in Fig. 11, so that the screen 533 (the contents of 
the information retrieval request sent from the digital 
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copying machine 110 in the step S604) shown in Fig- 12 
appears in the terminal unit 160 (step S605). 

The information manager on the terminal unit 160 side 
makes a decision, referring to the aforesaid screen 533, on 
5 whether or not to accept the retrieval request. If 

accepting the retrieval request, the information manager 
selects "YES", whereas, if not accepting it, the information 
manager selects "NO" (step S606). 

If the selection of "YES" (acceptance of the retrieval) 

10 is made in the step 3606, this selection result is 

transmitted from the terminal unit 160 to the file section 
123 of the digital copying machine 110 (step S607). 

Upon receipt of this notification from the terminal 
unit 160 in the step S607, the file section 123 implements a 

15 document retrieval in a manner that the contents of the 

information retrieval request input by the user in the steps 
S601 and S602 are used as a keyword, and further issues a 
new password to the terminal unit 160 (step S608). 
Accordingly, in the terminal unit 160, the screen 546 in Fig. 

20 24 appears, and the information manager on the terminal unit 
160 side notifies the qualified user, who issues the 
information retrieval request, of the new password displayed 
on the screen 54 6 by means of word of mouth or electronic 
mail, so that the user can use the new password for 

25 subsequent operations. 
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Furthermore, the file section 123 prints out the 
document obtained as a result of the document retrieval 
through the use of the printer section 112 (step S609). 
Thereafter, this processing comes to an end. 
5 On the other hand, if the selection in the step S606 

shows "NO" (rejection of the retrieval), this "NO" selection 
O is given from the terminal unit 160 to the file section 123 

£ of the digital copying machine 110 (step S610). 

y The file section 123 issues a new password and notifies 

10 the terminal unit 160 of the new password without performing 
^ the document retrieval (step S611). Following this, in the 

^ operating section 3 05 of the digital copying machine 110, 

-!! the screen 534 in Fig, 13, representative of the rejection 

i£ H 

of the retrieval request, appears (step S612), and this 

15 processing comes to an end. 

[In the Case of an Information Retrieval Request According 
to Information Retrieving Method 2: see Figs. 26 and 27] 

First of all, the user on the digital copying machine 
110 writes various kinds of information such as a password 

20 in the retrieval sheet 190 in Fig. 9 (step S701). Then, the 
user puts that retrieval sheet 190 on the original platform 
of the reader section 111 of the digital copying machine 110 
(step S702). Subsequently, the user turns on a start button 
(not shown) in the operating section 305 (step S703), so 

25 that the information described in the retrieval sheet 190 is 



- 38 - 

read but by the digital copying machine 110 and transferred 
to the file section 123. 

The file section 123 makes a decision, on the basis of 
the sheet decision sections 515 to 520 in the retrieval 
5 sheet 190, as to whether or not the inputted sheet is a 
retrieval sheet 190 (step S704). 

If the decision result of the step S704 shows a 
retrieval sheet, the file section 123 makes a decision as to 
whether or not the correct password information is set in 
10 the retrieval password section 522 in the retrieval sheet 
190 (step S707 ) . 

If the decision of the step S707 shows that the 
password in the retrieval sheet 190 is correct, the file 
section 123 transmits the information in the retrieval sheet 
15 190 as an information retrieval request to the terminal unit 
160 (step S709) • 

After this, steps similar to steps S605 to S612 in Fig. 
2 5 are conducted, and this processing comes to an end. 

On the other hand, if the decision of the step S704 
2 0 does not show a retrieval sheet 190, the file section 123 
recognizes that the input sheet is a document (an original 
or the like) to be preserved in a disk, and writes that 
document in a predetermined disk through the use of the MO 
drive 130 (step S705). 
25 Furthermore, the file section 123 writes a "document 



name" corresponding to that document and registers it, and 
makes the printer section 112 print out that result as the 
retrieval sheet 190 (step S706). Thereafter, this 
processing terminates - 
5 Also, if the decision of the step S707 indicates the 

password in the retrieval sheet 190 is incorrect, a message 
O to this effect is displayed in the operating section 305 of 

£ the digital copying machine 110 (step S708), Thereafter, 

yj this processing terminates. 

m 10 [In the Case of an Information Retrieval Request According 
J" to Information Retrieving Method 3: see Figs. 28 and 29] 

Si First of all, the user on the G3FAX 140 describes 

various kinds of information, such as a password, in the 

retrieval sheet 190 in Fig. 9, and sends it to the digital 
15 copying machine 110 by FAX transmission. The FAX section 

121 of the digital copying machine 110 receives it (step 

S801) . 

The FAX section 121 makes a decision, on the basis of 
the sheet decision sections 515 to 520 in the received sheet, 
20 as to whether or not the received sheet is a retrieval sheet 
190 (step S802 ) . 

If the decision of the step S802 indicates the 
retrieval sheet 190, the FAX section 121 makes a decision as 
to whether or not the correct password information is set in 
25 the retrieval password section 522 of the retrieval sheet 



# 
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190 (step S803) . 

If the decision of the step S803 indicates that the 

password written in the retrieval sheet 190 is incorrect, 

the FAX section 121 makes the printer section 112 of the 
5 digital copying machine 110 print out the received sheet as 

if it were an ordinary FAX reception (step S826). 
O Thereafter, this processing comes to an end. 

^ On the other hand, if the decision of the step S803 

lJ indicates that the password in the retrieval sheet 190 is 

[n 10 correct, the FAX section 121 transfers the information in 



the retrieval sheet 190 as an information retrieval request 
to the file section 123 (step S804). The file section 123 
transmits that information retrieval request to the terminal 
unit 160 (step 8805) • 



the effect of the transmission of the information retrieval 
request appears, and when the information manager on the 
terminal unit 160 side inputs a correct password through the 
screen 532 in Fig. 11, screen 533, shown in Fig. 12 (the 

20 contents of the information retrieval request sent from the 
digital copying machine 110 in the step S805), is displayed 
in the terminal unit 160 (step S806). 

The information manager on the terminal unit 160 side 
makes a decision, by reference to screen 533, as to whether 

25 or not to accept the retrieval request (step S807). 



15 



In the terminal unit 160, the screen 531 in Fig. 10 to 
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If the decision of the step S807 is made to accept the 
retrieval request, the information manager sends the FAX 
transmission report 535 in Fig. 14, together with the 
information on the information retrieval request, to the 
5 digital copying machine 110 by FAX transmission. 

Accordingly, in the digital copying machine 110, the FAX 
section 121 receives the information (the information on the 
information retrieval request and the FAX transmission 
report 535) coming from the terminal unit 160 through the 
10 FAX transmission, and hands it over to the file section 123 
(step S808 ) . 

The file section 123 conducts a document retrieval 
using the contents of the information retrieval request as 
one or more keywords, issues a new password and notifies the 
15 terminal unit 160 of this new password (step S809). Thus, 
the information manager on the terminal unit 160 side 
notifies the qualified user who requested the information 
retrieval, of the new password. 

In addition, the file section 123 transfers the 
20 document forming the retrieval result in the step S810, 

together with the information on the information retrieval 
request and the information of the FAX transmission report 
535, to the FAX section 121 (step S811). 

On the other hand, if the decision of the step S807 
25 results in the rejection of the retrieval request, the 
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information manager sends the FAX transmission report 536 in 
Fig. 15, together with the information about the information 
retrieval request, to the digital copying machine 110 by FAX 
transmission. Accordingly, in the digital copying machine 
5 110, the FAX section 121 receives the information (the 

information about the information retrieval request and the 
O information of the FAX transmission report 536) FAX- 

=p transmitted from the terminal unit 160 and hands it over to 

y the file section 123 (step S812). 

m 10 The file section 123 recognizes that the retrieval 

J" request has been rejected, on the basis of the contents of 

the FAX transmission report 536 from the FAX section 121, 
issues a new password without conducting information 
^ retrieval, and notifies the terminal unit 16 0 of the new 

15 password (step S813). Furthermore, the file section 123 
communicates, to the FAX section 121, information to the 
effect that the retrieval request has been rejected (step 
S814) . 



20 section 121 makes a decision, on the basis of the contents 
of the information retrieval request (the contents of the 
retrieval sheet 190) received in the step S812, as to 
whether a reply-receiving FAX number is set or not (whether 
or not a description exists in the reply-receiving FAX 

25 setting section 513) (step S815). 



After the processing in the step S811 or S814, the FAX 
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If the decision of the step S815 shows the setting of a 
reply-receiving FAX number, the FAX section 121 stores the 
set FAX number (step S817). 

On the other hand, if the decision of the step S815 
5 indicates no a reply-receiving FAX number, the FAX section 
121 stores the number of the retrieval sheet 190 
transmitting FAX received in the step SBOl (in this case the 
number of the G3FAX 140) (step S816). 

After the processing in the step S816 or 817, the FAX 
10 section 121 makes a decision, on the basis of the contents 
of the information retrieval request (the contents of the 
retrieval sheet 190) received in the step S812, as to 
whether a reply (return) time is set or not (whether or not 
a description exists in the FAX reply time setting section 
15 514) (step S818) . 

If the decision of the step S818 indicates the setting 
of a reply time, the FAX section 121 sets that set time as a 
dialing time (step S820). 

On the other hand, if the decision of the step S818 
20 indicates no setting of a reply time, the FAX section 121 
sets the present time as a dialing time (step S819). 

After the processing in the step S819 or S82 0, when the 
dialing time comes, the FAX section 121 makes a decision on 
whether the password of that information retrieval request 
25 is correct or not (step S821). 



If the decision of the step S821 indicates incorrect 
password, the FAX section 121 dials the FAX number that was 
stored in the step S816 or S817, to send the information 
indicative of the improper password thereto by FAX 
transmission (step S825). Thereafter, this processing comes 
to an end. 

On the other hand, if the decision of the step S821 
shows that the password is correct, the FAX section 121 
makes a decision, on the basis of the information from the 
file section 123 in the step S811 or S814, as to whether the 
transmission of the retrieved document in response to that 
information retrieval request is permitted or not (step 
S822) . 

If the decision of the step S822 indicates permission 
for the transmission of the retrieved document, the FAX 
section 121 dials the FAX number that was stored in the step 
S816 or S817 to send the information of the FAX transmission 
report 535 in Fig. 14, together with the information 
regarding the retrieved document (information given from the 
file section 123), thereto by FAX transmission (step S823). 
Thereafter, this processing comes to an end. 

On the other hand, if the decision of the step S822 
shows no permission for the transmission of the retrieved 
document, the FAX section 121 dials the FAX number that was 
stored in the step S816 or S817 to send the information on 
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only the FAX transmission report 536 (the information from 
the file section 123 in the step S814) thereto by FAX 
transmission (step S824), Thereafter, this processing comes 
to an end. 

5 Incidentally, information retrieving method 4 (the 

information retrieval request from a PC) is similar to 
Q information retrieving method 1 (the information retrieval 

J request from the operating section 305 of the digital 

copying machine 110), and detailed description thereof will 
10 be omitted for brevity. 

As described above, according to this embodiment, in 
^ the digital copying machine 110, after the retrieval 

processing according to the information retrieval request 
from the user, a new password is issued at random, and the 
15 previous password is made invalid whereas the new password 
now becomes valid. Additionally, this new password is 
communicated to the qualified operator of the digital 
copying machine 110 who issued the information retrieval 
request. 

20 Thus, with the configuration in which a password needed 

for the information retrieval is changed at every 
information retrieval, even in the case of a filing system 
which manages a large volume of information and accepts 
various information retrieving methods, improper leakage of 

25 the information to unauthorized persons is preventable with 
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reliability, and the reliability of the information 
management is improvable. 

In the above-described embodiment, a new password the 
file section 123 issues is sent to a terminal unit, and a 
5 manager who manages managing terminals informs each user of 
the new password. However, it is also appropriate that a 
new password is given to each user in a system meeting a 
document retrieval request mode. 

In the case of a retrieval request from a control panel 

10 and in the case of a retrieval request (local retrieval 

request) made in a manner that a retrieval sheet is read by 
the reader section 111, a new password is sent to a managing 
terminal and further is displayed on a displaying section of 
the control panel. 

15 On the other hand, in the case of a retrieval request 

sent from the terminal unit 170 on the network 180 through 
the network 180 and in the case of a retrieval request 
(remote retrieval request) by a FAX document, a new password 
is forwarded to a managing terminal but not displayed on the 

20 control panel, unlike the local retrieval request. 

Thus, the information on the new password is correctly 
transmittable to the user. 

Furthermore, in the above-described embodiment, after a 
retrieval request including a retriever ID and a password is 

25 sent to the terminal unit 160, the information manager on 



the terminal unit 160 side checks or confirms the retrieval 
request manually. However, it is also appropriate that the 
terminal unit 160 confirms the retrieval request 
automatically rather than manually- 
5 In this case, the correspondence or correlation between 

the retriever ID and the password is stored in a database on 
the terminal unit 160 side and, upon receipt of a retrieval 
^ request, a check is made by reference to the contents of the 

^ database on the basis of the received retriever ID and 

E 10 password. Following this, a new password is produced using 
a predetermined algorithm, such as random numbers, to update 

a 

^ the contents of the database. 

ry In addition, it is also acceptable that a respective 

O document range which can be disclosed to the hold of each 

15 particular retriever ID is set and registered in the 

database, and a decision is made as to whether the document 
requested for the retrieval can be disclosed or not. 

Moreover, naturally, the objects of these embodiments 
are achievable in a manner that a record medium storing a 
20 software program code for realizing the functions of the 

host and the terminal in the above-described embodiment is 
supplied to a system or an apparatus and the program code is 
read out from the record medium by a computer (or a CPU, an 
MPU) of the system or the apparatus to implement the 
25 functions . 
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In this case, the program code itself read out from the 
record medium realizes the functions in these embodiments , 
and the record medium storing this program code constitutes 
an aspect of this invention. 
5 The record mediums for the supply of the program code 

include a ROM, a floppy disk, a hard disk, an optical disk, 
a a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a 

=p nonvolatile memory card and others. 

ijj In addition, naturally, in addition to realizing the 

iji 10 functions in these embodiments by implementing the program 

code read out by the computer, for the realization of the 
El functions of this embodiment, this invention covers an OS or 

the like operating on the computer conducting a portion of 
or all of the actual processing according to that program 
15 code. 

Still additionally , this invention covers an approach 
in which the program code read out from the record medium is 
written in a memory provided in a function-extending board 
incorporated into a computer or in a function-extending unit 
20 connected to the computer and a CPU or the like provided in 
the function-extending board or the function-extending unit 
conducts a portion of or all of the actual processing in 
accordance with the program code to realize the functions of 
these embodiments . 
25 As described above, in these embodiments, a new 
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password is issued at every fulfillment of a predetermined 
information processing function (information retrieving 
function or the like) so that the new password is accepted 
as the effective password in the next fulfillment of the 
5 information processing function / and the previous password 
is made invalid. 

o Concretely, in a digital copying machine combining a 

filing function, an OCR function, a facsimile function and a 
yj network function, after the implementation of the 

m 10 information retrieval requested from the user through the 
r' use of a password, such as an information retrieval 

hj requirement (information retrieval request) made through its 

operating section, an information retrieval requirement by 
an information retrieval sheet sent from the external by 
15 facsimile transmission or an information retrieval 

requirement by a personal computer on a network, a new 
password is issued at random, and the previous password is 
made invalid. This new password is sent to the managing 
unit on the network and communicated to the qualified user 
20 of the digital copying machine. Accordingly, for requesting 
an information retrieval, the user must use this new 
password, and otherwise, that information retrieval 
requirement is not accepted in the digital copying machine. 
In addition, it is also appropriate that the 
25 information manager on the managing unit side confirms the 
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contents of the information retrieval request input to the 
digital copying machine^ and the digital copying machine 
conducts the information retrieval according to the 
confirmation result (acceptance or no acceptance of the 
5 request) • 

Thus, according to these embodiments, it is possible to 
certainly prevent improper leakage of the information to 
unauthorized persons or the like and to surely keep secret 
confidential information, which can enhance the reliability 
10 of the information management. 



